MainnetNetwork settingsExplorerBlocks and transactionsValidatorsRun consensusStakingDelegate ECROXDPoSHow consensus worksGovernanceProposals and votesEcrox CoinThe native coinTokenomicsCoin utilityRun a nodeFull and RPC nodes
Build hubStart buildingDocumentationGuides and referenceDeveloper portalAPI and RPC accessMigrateMove an EVM dappGrantsFunding for buildersSubmit a dappGet listedBug bountyReport a vulnerability
All productsThe full ecosystemEcrox WalletSelf-custody walletEcrox ExchangeCEX exchangeEcrox SwapDEX exchangePanda PayPayment gatewayEUSD CoinStable coinEcrox GoldGold-pegged coinEcrox BankCrypto bankingLaunchpadLaunch a projectBridgesCross-chain transfers
WhitepaperTechnical overviewAudits & securityCertiK and policiesNewsAnnouncementsBlogArticlesFAQsCommon questionsBrand kitLogos and colours
About EcroxMission and visionRoadmapMilestonesPartnersWork with usCareersJoin the team
Open explorer ↗
Ecrox Chain / Bug bounty

Ecrox Chain bug bounty

Help keep Ecrox Chain and its users safe. Report vulnerabilities responsibly and get rewarded according to severity.

Report a vulnerability ↗Security and audits

Severity levels

Rewards depend on real impact and how exploitable an issue is.

Critical

Chain halts, consensus failure or direct loss of funds.

High

Privilege escalation or major denial of service.

Medium

Significant data exposure or meaningful app weaknesses.

Low

Lower-impact issues and hardening suggestions.

In scope

Protocol

Core protocol

Consensus, execution, node software and system contracts.

Contracts

Official contracts

Staking, governance and ecosystem contracts deployed by Ecrox.

Wallet

Ecrox Wallet

Issues that affect keys, funds or transaction integrity.

Services

Public infrastructure

Official RPC and explorer services where testing is permitted.

How to report

Step 1

Don’t harm users

Never access or move real user funds or data beyond a minimal proof.

Step 2

Collect evidence

Include the component, steps to reproduce, impact and logs.

Step 3

Email security

Send your report to [email protected] with the subject Security Report.

Step 4

Coordinate

Give the team time to fix the issue before any public disclosure.